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METHOD AND APPARATUS FOR UPGRADING A DATABASE 
IN A REDUNDANT ENVIRONMENT BY RELEASE CHAINING 



Field of the Invention 



5 



This invention relates to database data and structure 



upgrades. Specifically, this invention is directed towards the 



upgrading of a database in a redundancy environment by release 



chaining . 



Background 



10 



A database as described herein consists of one or more 



related tables of compound data structures. The database's schema 



is defined as the organization of its tables and the relationships 



1/1 among them. A version of such a database is a specific schema and 
,g the specific data in the structures. As they evolve over time, 
^L5 databases are embodied in a series of versions, each with a 

changed schema and new data elements. A new version of the 
I'Z database is generated from an old one by upgrading its schema and 
•~ mapping its data to the new schema. Database software will gener- 
ally support upgrading from any of several previous versions. 
20 Certain database systems provide fault tolerance by main- 

taining redundant images of a database, and using the mirrored 
images in case of failure of the primary database. A messaging 
protocol is used to keep mirror images identical to the primary 
database. The basic protocol is the transmission of a message 
25 containing one or more database records, in a specific format, to 
the respective mirror databases, and commitment of the data upon 
receiving an acknowledgement, or backout in case of failure. . 
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In a redundancy environment, upgrading is sometimes performed 
by upgrading a mirror image database to the new version and then 
at the appropriate time switching to use the mirror image as the 
primary database. In this process, upgrading is performed by 
receiving database update messages from a previous version and 
mapping them into the schema of the new version. An empty data- 
base structure conforming to the schema of the new version is cre- 
ated to accept these mappings. 

A new release of a database software might support the 
upgrading of databases from up to three previous generations. In 
existing systems, each new software release provides separate 
modules for each prior release from which an upgrade is possible. 
Upgrade code must be developed to map each of these three old 
releases into the current release, with all of the upgrade code 
for each new version written anew in each release (using older 
release code as a model) . Thus, if the latest database software 
is at release 4, and assuming that releases have been numbered 
only at full numeral versions (e.g., release 1, release 2 and 
release 3), then the upgrade code for release 4 must contain code 
to convert the databases to release 4 directly from release 1, 
release 2, or release 3. 

The current upgrade system requires the duplication of code 
for mapping and writing databases for each prior supported 
version. This also increases complexity in code as analysis must 
be done between any prior release and the newest release to 
understand how different versions must be changed to arrive at the 
latest release. For example, developing the release 2 to release 
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4 upgrade code using the current approach involves understanding 
changes from release 2 to release 3, and release 3 to release 4, 
and combining them into a single module. In addition, the 
complexity of mapping an update message into the database itself 
must also be included in each set of upgrade code. 
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SUMMARY 

It is therefore an object of the present invention to reduce 

the amount of code development necessary in developing a new 

release of a database system and operating code. 
5 It is a further object of the present invention to reduce the 

amount of code redundancy from one version of the operating code 

as compared to an earlier version. 

These and other objects of the invention are provided by a 

system that provides for version upgrades of the database to be 
=£p processed in a chained manner. Update protocol messages from a 
sfj previous version are mapped into protocol messages of the next 
m most recent version. These are mapped, in turn, to a more recent 
m version until the message of the current version has been derived. 

Then, the current version update message is processed as in a 
its normal database update to write the current version of the 
^ database . 

U? Other objects, features, and advantages of the present 

invention will be apparent from the accompanying drawings and from 
the detailed description which follows below. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The system is illustrated by way of example and not 
limitation in the figures of the accompanying drawings in which 
like references indicate similar elements and in which: 
5 Figure 1 is a block diagram of a switch containing a set 

memory systems configured in accordance to one embodiment of the 
present invention. 

Figure 2a-2d is a set of block diagrams illustrating changes 
q in the memory systems of Figure 1 during an upgrade performed in 
jyo accordance with one embodiment of the present invention. 
^ Figure 3 is a flow diagram illustrating a process for 

'% upgrading the memory systems in Figures 2a-2d in accordance with 
M one embodiment of the present invention. 

Q Figure 4 is a diagram illustrating the flow of update 

fife messages through a set of update and upgrade functions provided by 

=D one embodiment of the present invention to upgrade the memory 

systems of Figure 2a-2d. 

Figures 5a-5e is a set of block diagrams illustrating 

changes in a memory system of Figure 1 during an upgrade 
20 performed in accordance with one embodiment of the present 

invention. 

Figure 6 is a flow diagram illustrating a process for 
upgrading the memory system in Figures 5a- 5e in accordance with 
one embodiment of the present invention. 
25 Figure 7 is a diagram illustrating the flow of update 

messages through a set of update and upgrade functions provided by 
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one embodiment of the present invention to upgrade the memory 
systems of Figure 5a-5e. 
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DETAILED DESCRIPTION 

In order to reduce code redundancy and possibilities for 
error in the generation of new code, the system provides for 
version upgrades of the database to be processed in a chained 
5 manner. The databases used in the present invention may be any 
databases for which a message-based upgrade protocol is used. 
Update protocol messages from a previous version are mapped into 
protocol messages of the next most recent version. These are 
mapped, in turn, to a more recent version until the message of the 

\ssf 

ijp current version has been derived. Then, the current version 

m 

:-Q update message is processed as in a normal database update to 
^ write the current version of the database. 

For example, in a release 4 system, upgrading a database from 
JL, release 2 involves the following sequence: 
Ifp 1. Receiving the release 2 update message; 

H 2 . Mapping the release 2 update message into a release 3 

=fi update message; 

3 . Mapping the release 3 update message into a release 4 
update message; and, 
20 4. Updating the release 4 database using the normal update 

code . 

Benefits of release chaining include: 

Reduced Code Development: Instead of developing essentially 
new code to map each of several old version messages into the 
25 current version, it is only necessary to develop code to map the 
most recent version into the current version. Older version are 
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processed by chaining to this new code. 

Improved Quality: While upgrade code is usually performed 
once per customer, database update code is used every day in every 
system. So, much of the code for performing upgrades is much more 
thoroughly tested than in the old method. In addition, the 
"links" in the chain for older versions are identical code to that 
used for upgrades in earlier versions, so the upgrades also 
benefit from being exercised during all the upgrades performed 
previously. In the prior art, all of the upgrade code for each 
new version was basically written new in each release of software 
(using older release software code as a model) . 

Consistency: Since the update code for the current version 
database is used to actually write the upgraded databases, it is 
always written in exactly the same manner as for other operations. 

Reduced Code Redundancy: Instead of duplicate code for each 
supported release of software for mapping and writing databases, 
all mapping of one version's format and data occurs in one module 
rather than in several places. For example, in the old method the 
mapping contained in release 3 software to release 4 software is 
also implicitly included in the mapping from release 2 software to 
release 4 software. With chaining, update messages conforming to 
release 2 software is mapped to messages conforming to release 3 
software, these messages are mapped to conform to messages 
generated by release 4 software, then the database is updated 
using messages generated by release 4 update code. 

Reduced Code Complexity: Developing the release 2 to release 
4 upgrade code using the old method involves understanding changes 
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from different versions of the database supported by the different 
releases of software, and combining them into a single module. In 
addition, the complexity of mapping an update message into the 
database itself must also be included in each set of upgrade code. 
In the chained method, code to map release 2 to release 3 is 
written once--in release 3--and only maps release 2 update 
messages to release 3 messages. Writing an update message to the 
database is always done with the update code of the current 
release. 

The databases in one embodiment of the present invention are 
contained in a real-time network switch containing redundant 
processors. The databases consist of data structures needed to 
perform the various functions of the network switch, including the 
control of the switching and the maintenance of historical data 
for the network. The databases are stored in memory devices such 
as random access memory or battery-backed random access memory on 
the network switch. Although the invention is described in 
context of use in a network switching device, the invention 
applies to any database using a message-based update protocol. 

Figure 1 is a block diagram of a switch 50 containing a 
control card 75 with a memory system 100 configured in accordance 
with one embodiment of the present invention. Memory system 100 
contains a random access memory (RAM) 102, a read only memory 
(ROM) 104, and a battery backed random access memory (BRAM) 106. 
RAM 102 may be implemented using dynamic RAM (DRAM) or synchronous 
DRAM (SDRAM) . ROM 104 may be implemented using flash memory or 
such non-volatile memory devices as magnetic and/or optical 



Our File No: 081862. P122 
Express Mail No: EM560883474US 



-9- 





drives. BRAM 106 is implemented as RAM that has back-up power 
supplied by batteries. Similar to ROM 104, BRAM 106 may also be 
implemented using other types of non-volatile storage medium. 
Depending on the performance requirements of the specific 
5 implementation, RAM 102, ROM 104, and BRAM 106 may be implemented 
using other types of storage devices. In a preferred embodiment, 
RAM 102 and BRAM 106 must be implemented with storage devices that 
are writable. 



=|p necessary in the operation of switch 50. Switch 50 uses RAM 102 
to store the running code and the active configuration databases. 
The databases include routing tables for the network to which 

U J switch 50 is connected, status tables to hold the status of the 

^ cards in switch 50, and the other tables used in the operation of 

Sfe switch 50. 

rd if switch 50 fails (e.g., switch 50 suffers a power loss or 

=D is reset) , RAM 102 is cleared as it becomes un-powered. ROM 104 

is then used to recover the program code in RAM 102 once switch 50 
is operational again as ROM 104 is a non-volatile memory. BRAM 

20 106 contains a back-up of the set databases. This back-up set of 
databases is continuously maintained and updated by the executing 
code in RAM 102. Even if switch 50 fails, RAM 102 may be 
refreshed by the data retrieved from BRAM 106. RAM 102 is used in 
the execution of code and storage of the active configuration 

25 databases as RAM 102 is generally faster in operation than ROM 104 
and BRAM 106. 



Memory system 100 contains the program code and data 



Coupled to memory system 100 is a processor 108, which is a 
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processor that executes the code in memory system 100 during the 
operation of switch 50. Processor 108 is also coupled to a 
networking switching device 110. Network switching device 110 
controls the switching of data for a set of communication 
5 interface cards 112. Communication interface cards 112 send and 
receive data from a network (not shown) . Memory system 100, 
processor 108, and network switching device 110 are contained on 
controller card 75. 

Switch 50 also contains a second controller card 575 that 
iM) acts as a back-up for controller card 75. Thus, in case 
a?! controller card 75 suffers an error in software or fails in 
]^ hardware, second controller card 575 can take over and operation 
? 1; in switch 50 can continue with the minimal of interruption. 
^ Controller card 575 contains a memory system 500 that acts in the 
Bs exact manner as memory system 100 does for controller card 75. 
!y Memory system 500 contains a RAM 502 (for storing executing 
*D operating code and databases) , a ROM 504 (for storing an image of 
the operating code) , and a BRAM 506 (for storing a back-up of the 
databases) . Memory system 500 is coupled to a processor 508 and a 
20 network switching device 510. The description to memory system 
100, processor 108 and network switching device 110 are also 
applicable to memory system 500, processor 508 and network 
switching device 510 in terms of operation and function. As the 
standby card, second controller card 575 maintains a backup of the 
25 databases and operating code in memory system 500 that is 

contained in memory system 100. The databases in memory system 
500 of controller card 575 are updated by using update messages 
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generated from the databases in memory system 100 of controller 
card 75. 

Figures 2a-2d is a series of diagrams illustrating the 
changes in the software contained in memory system 100 and memory 
5 system 500 during an upgrade. Figures 2a-2d is described with 
reference to Figure 3, which is a flow diagram illustrating the 
sequence of events in the upgrade process. Generally, the process 
involves loading an image of the new release of operating code 
into ROM 104 and RAM 502. The process continues with creating new 
i^p database structures in RAM 502, which conform to the 
ni specifications of the latest version, and updating the structures 
^ with update messages generated from the databases in RAM 102. The 

databases in BRAM 506, which still conform to the schema of the 
?=a * old version, are also updated as a safeguard such that controller 

card 575 can still be used as an active card, 
fy The latest mapping functions are hard-coded into the software 

=y image of the new release. All the upgrade processing is performed 
through execution of the new release code. The "old versions" of 
the mappers are compiled and used in the new release software 
20 module, but the object code of these mappers is not the same as 
when they were compiled for the old release because of different 
addresses and offsets in the new release. So, the source of those 
mappers is the same in the new release, but the executable code is 
quite different. 

25 Initially, the update messages that are generated from the 

databases in RAM 102 conform to the older version of the database 
and cannot be directly used to update the databases in RAM 502 as 
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the databases in RAM 502 are of a newer, different version. Thus, 
the format and content of the update messages are first upgraded 
to the latest version (e.g., the version of the databases in RAM 
502), using one or more intermediary mappers before the update 
5 message can be used to update the databases in RAM 502. The 

update messages for BRAM 506 still require the old version of the 
update messages as the version of the databases in BRAM 506 are 
the same as the version of the databases in RAM 102. After the 
databases in RAM 502 have been completely populated through the 
^0 use of upgraded update messages and control has been switched over 
h ?e to controller card 575 from controller card 75, the databases in 
I s * RAM 502 are copied to BRAM 506, replacing the prior version 
-•i: databases in BRAM 506. 

^ Figure 2a shows the release numbers of the software in RAM 

Gf5 102, ROM 104, and BRAM 106 of memory system 100 and in RAM 502, 
rj ROM 504, and BRAM 506 of memory system 500 before the upgrade. RAM 
=S 102 and RAM 502 contain the operating code and the active 

databases, both of which are at version 8.5.00. ROM 104 and ROM 
504 contain a non-volatile copy of the code, which is also at 
20 version 8.5.00. BRAM 106 and BRAM 506 contain the battery backed 
copies of the databases, which are at version 8.5.00. For 
purposes of explanation, it is assumed that controller card 75 is 
the active controller card and controller card 575 is the standby 
controller card. 



'Q^\^\Ref erring to Figure 2p^and block 600 of Figure 3, the 

active ROM and the standby RAM (e.g., ROM 104 and RAM 502, 
respectively) , are 2x>aded with an image of the updated release of 
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the operating code, version 9.2.00/ using a protocol such as the 
trivial file transfer protocol (^TTP) . The loaded image contains 
all code needed for the operaJZlon of switch 50, which includes 
code needed to upgrade the/aatabases contained in switch 50. The 
configuration databases An RAM 502 are cleared by the loading of 
the new software imag^. The old version of the databases are 
flushed from RAM 502^ because these databases are not fully 
compatible with tlzfe new software. As described above, 
incompatibilities between the old versions of the databases and 
the new operating code are due to changes in the schema of the new 
databases ariffl changes in the new operating code to operate with 
the new formats. 

After ROM 104 and RAM 502 are loaded with the new release of 
the code, any reset or re-initialization of switch 50 results in 
the standby controller card, controller card 575, becoming the 
active controller card and loading the old release operating code 
image from ROM 504. Controller card 575 then rebuilds the 
databases in RAM 502 using the old version of the databases 
contained in BRAM 506. Controller card 575 becomes the active 
controller card as the ROM in controller card 75, which contains 
the operating code for the new version of the database has not 
been specified by the user as the primary version. 

As shown in Figure 2c and in block 602 of Figure 3, the new 
version of the databases in RAM 502 is updated with update 
messages from RAM 102. As described below, the update is 
performed by chaining mappings from one version to the next. 
After block 602, the upgraded databases in RAM 502 have been 
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updated with the most current information from RAM 102. As the 
databases in RAM 502 are being updated using chain mapped updates, 
the databases in BRAM 506 is also constantly being updated using 
the old version of the update messages. This is because the 
5 databases in RAM 102 and BRAM 506 are the same version. 

In block 604, the user issues a command to switch 50 to run 
the new revision. This causes control of switch 50 to pass from 
the active controller card, controller card 75, to the new version 
upgraded controller card, controller card 575. When controller 
^0 card 575 receives control and thus becomes the now active 
if; controller card, the software on controller card 575 rechecks 
^ local configuration and completes integration of the new 
4j databases. This occurs with little or no impact to data 
P transmission through the switch. In the preferred embodiment, the 
Oj5 switchover to controller card 575 occurs at user control through a 
Ty command issued by the user and does not take place automatically. 
,n In block 606, as the databases in BRAM 506 can no longer be 

~ used as the databases in BRAM 506 is an older version, the system 

copies the databases in RAM 502 to BRAM 506, replacing the 
20 databases in BRAM 506 with the latest version. This is shown in 
Figure 2d. The new version databases are not rewritten to BRAM 
until after the switchover has been requested and completed in a 
satisfactory manner to allow the controller card 575 to still act 
as an active controller card in case there is a problem with the 
25 upgrade. After the databases have been copied to BRAM 506 from 
RAM 502, ROM 504 is also upgraded with the new release of the 
operating code image and operation continues as normal with the 
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upgraded software. 

Figure 4 illustrates the function call and associated data 
flow for the chained upgrade process used in block 602 . The 
upgrade, which is initiated by a user, begins when the system 
calls a db_update function 702. Db_update function 702 is 
directed to update the databases in RAM 502 by using a release 8.5 
update message (Rel 8.5 Update) 714. 

The first mapping in the upgrade sequence uses a release 8 . 5 
update to RAM mapper (Rel 8.5 u2r mapper) 704 to build a release 
9.1 update message (Rel 9.1 Update) 716 from Rel 8.5 Update 714. 
Rel 8.5 u2r mapper 704 calls a release 8.5 to release 9.1 update 
to update mapper (Rel 8.5->9.1 u2u mapper) 710 to generate Rel 9.1 
Update 716. 

After Rel 9.1 Update 716 has been created, a release 9.1 
update to RAM mapper (Rel 9.1 u2r mapper) 706 is called to create 
a release 9.2 update message (Rel 9.2 Update) 718. A release 9.1 
to 9.2 update to update message mapper (Rel 9.1->9.2 u2u mapper) 
712, which is a function similar to Rel 9.1->9.2 u2u mapper 712, 
is called by Rel 9.1 u2r mapper 706 to create Rel 9.2 Update 718. 

Assuming that there are no further mappings necessary in the 
upgrade process after Rel 9.1->9.2 u2u mapper 412 is executed, the 
last part of the mapping sequence is to call the current update to 
RAM mapper (Current u2r mapper) 708 to write the Rel 9.2 Update 
718 to the databases in RAM 502. 



ether there is one op several update messages generated for 



'each database to be updated is a design decision by the 
implementers of eaoii database . In some cases one update message 
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is used for the whole database (e.g., the update message contains 
all the database records for a database) , in others the database 
is sent over in several update messages (e.g., the update message 
contains a portion of the database records for a database) . The 
5 decision usually depends on t>fe size and structure of the 

database, with consideration for the need to have as little loss 
of data as possible. Irr addition, whether the schema of a 
database in the set or databases changes between different 
releases of software is also an implementation decision. Thus, a 
5^0 new release of tjpe software image does not necessarily mean that 
^ there is a new/version of a database schema for any of the 
1% databases. /En the explanation given herein, however, it is 

assumed that the databases schemas are changed with each release. 
^ Specifically, a different release of the software image has a 
Qfe different version of the database schema for at least one 
1 U database . 

=n Figures 5a-5e is a series of diagrams illustrating the 

changes in the software contained in memory system 100 during an 
upgrade where switch 50 only contains a single controller card, 

20 controller card 75. Figures 5a-5e is described with reference to 
Figure 6, which is a flow diagram illustrating the sequence of 
events in the upgrade process. Generally, the process involves 
loading an image of the new release of operating code into ROM 104 
and RAM 102. The process continues with creating new database 

25 structures in RAM 102, which conform to the specifications of the 
latest version, and updating the structures using update messages 
generated from the databases in BRAM 106. Initially, the update 
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messages that are generated from the databases in BRAM 106 conform 
to the older version of the database and cannot be directly used 
to update the databases in RAM 102 as the databases in RAM 102 are 
of a newer, different version. Thus, the format and content of 
the update messages are first upgraded to the latest version 
(i.e., the version of the databases in RAM 102) using one or more 
intermediary mappers before the update message can be used to 
update the databases in RAM 102. After the databases in RAM 102 
have been completely populated through the use of upgraded update 
messages, the databases in RAM 102 are copied to BRAM 106, 
replacing the prior version databases in BRAM 106. 

Figure 5a shows the release numbers of the software in RAM 
102, ROM 104, and BRAM 106 of the memory system 100 before the 
upgrade. As described above, RAM 102 contains the operating code 
and the active databases, both of which are at version 9.1.05. 
ROM 104 contains a non-volatile copy of the code, which is also at 
release 9.1.05. BRAM 106 contains the battery backed copies of 
the configuration databases, which are at release 9.1.05. 

Referring to Figure 5b and block 300 of Figure 6, ROM 104 
is loaded with an image of the updated release of the operating 
code, version 9.2.00, using a protocol such as the trivial file 
transfer protocol (TFTP) . After ROM 104 is loaded with the new 
release of the code, any reset or re-initialization of switch 50 
will cause RAM 102 to be cleared and the code in ROM 104 to be 
loaded into RAM 102. As described below, the code in ROM 104 is 
loaded into RAM 102 in block 302, when the user issues an upgrade 
command . 
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In block 302 of Figure 6, the new re/ ease of the code, 
on 9.2.00, in ROM 104 is loaded intc/ RAM 102. At this point, 
the configuration databases in RAM 102 are cleared by the loading 
of the new software image. The old version of the databases are 
• 5 flushed from RAM 102 because these databases are not fully 

compatible with the new software. Incompatibilities between the 
old versions of the databases and tine new operating code are due 
to changes in the formats of the nrew databases and changes in the 
new operating code to operate witfh the new formats. During the 
=ij0 upgrade of switch 50, significant service outage in switch 50 

occurs and may last from minutes to hours, depending on the amount 

if* / 

MS of provisioning. Outage occura due to the lack of a redundant 

controller card in this embodiment of switch 50 to continue 
P operation when all code and databases in RAM 102 are cleared after 
ffls the uploading of the image at the new software. The state of 
iy memory system 100 after black 302 has completed is shown in Figure 
sfi 5c. Nothing of the old reQ-ease of the software image is preserved 
~ in switch 50 past the loaaing of the new image into RAM 102 -- 

except for the configuration databases in BRAM 106. 
20 As shown in Figure 5d and in block 304 of Figure 6, the new 

version of the databases in RAM 102 is updated with update 
messages from BRAM 106. As described below, the update is 
performed by chaining mappings from one version to the next. 
After block 304, the upgraded databases in RAM 102 have been 
25 updated with the most current information from BRAM 106. Thus, in 
block 306, as the databases in BRAM 106 can no longer be used as 
the databases in BRAM 106 is an older version, the system copies 
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the databases in RAM 102 to BRAM 106, replacing the databases in 
BRAM 106 with the latest version. This is shown in Figure 5e. 
After the databases have been copied to BRAM 106 from RAM 102, 
operation of control card 75 continues as normal with the upgraded 
5 software. 

Figure 7 illustrates the function call and associated data 
flow for the chained upgrade process used in block 304. The 
upgrade, which is initiated by a user, begins when the system 
calls a rebuild_n_recover function 402. Rebuild_n_recover 

iip function 402 recreates the databases in RAM 102 by using update 

lij messages. 

is The first mapping in the upgrade sequence uses a release 9.1 

;^ BRAM to RAM mapper (Rel 9.1 b2r mapper) 404 to build a release 9.1 
M update message (Rel 9.1 Update) 414 from the databases in BRAM 
4f5 106. Rel 9.1 b2r mapper 404 performs the entire function of 
f"y moving the contents of the databases in BRAM 106 to RAM 102 by 
=Q invoking a release 9.1 BRAM to Update mapper (Rel 9.1 b2u mapper) 

410 to generate Rel 9.1 Update 414. In contrast to the mappings 

needed for updates in a scenario where switch 50 contains two 
20 controller cards, Rel 9.1 b2u mapper 410 is the additional mapping 

to be performed for an upgrade where switch 50 contains only a 

single controller card. 

After Rel 9.1 Update 414 has been created, a release 9.1 

update to RAM mapper (Rel 9.1 u2r mapper) 406 is called to create 
25 a release 9.2 update message (Rel 9.2 Update) 416. A release 9.1 

to 9.2 update to update message mapper (Rel 9.1->9.2 u2u mapper) 

412, which is a function similar to Rel 9.1 b2u mapper 410, is 
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called by Rel 9.1 u2r mapper 406 to create Rel 9.2 Update 416. 

Additional mappers may be used in cases where there are more 
conversions necessary to convert the update message to the latest 
revision. For example, if the version to be upgraded to were 
5 actually release 9.3 instead of release 9.2, then an additional 

mapping stage would be required. This mapping may be performed by 
a function such as a release 9.2->9.3 u2u mapper. Assuming that 
there are no further mappings necessary in the upgrade process 
after Rel 9.1->9.2 u2u mapper 412 is executed, the last part of 
the mapping sequence is to call the current update to ram mapper 

JJi (Current u2r mapper) 408 to write Rel 9.2 Update 416 to the 

:=j databases in RAM 102 . 

4J Figures 5-7 describe the situation where controller card 75 

?3 is the only controller card in switch 50. In many mission 
H5 critical applications, however, a desired configuration is to have 
!y a second controller card (e.g., controller card 575) in switch 50 
sjj to act as a standby controller card. If there is a failure in 
~ controller card 75, switch 50 can change over to the second 

controller card with very little loss of data. To ensure the 
20 least amount of latency for transfer, the second, standby, 

controller card is continuously updated with information from 
memory system 100 to closely replicate the contents of memory 
system 100. Unlike the upgrade of a switch containing only one 
controller card (where significant service outage in the switch 
25 occurs and may last from minutes to hour) , the upgrade of switch 
50 containing a second controller card does not cause significant 
service outage. In many cases, users might not even be aware when 
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an upgrade has been performed. The minimization of the outage is 
achieved by the redundant controller card in this embodiment of 
switch 50 to continue operation while all code and databases in 
RAM 502 are upgraded and updated. 
5 In the foregoing specification, the invention has been 

described with reference to specific exemplary embodiments 
thereof. It will, however, be evident that various modifications 
and changes may be made thereto without departing from the broader 
spirit and scope of the invention as set forth in the appended 
|£p claims. The specification and drawings are, accordingly, to be 
regarded in an illustrative rather than a restrictive sense. 
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